Zero Trust (NIST SP 800-207)

1. Zero Trust Tenets

   Seven tenets: resource-centric access, per-session authorization and continuous posture assessment.

2. Logical Components

   Policy engine, policy administrator and policy enforcement point.

3. Deployment Variations

   Enhanced identity governance, micro-segmentation and software-defined perimeter approaches.

4. Threats to Zero Trust Architecture

   Subversion of decision process, DoS and stolen credentials.

5. Migrating to Zero Trust

   Steps for moving an enterprise toward ZTA.

6. SP 800-207A Cloud-Native ZTA

   Identity-based segmentation for multi-cloud and cloud-native applications.

7. SP 1800-35 Implementing ZTA

   Example zero trust implementations.

8. CISA Zero Trust Maturity Model

   Pillars of identity, devices, networks, applications and data.

9. OWASP Zero Trust Architecture

   Developer-focused zero trust guidance.

Each section links to the official page. Titles and summaries by Extra Credit; the docs belong to their authors.